Red Hat Security Advisory

RHSA-2025:10738

Kiali 2.4.7 for Red Hat OpenShift Service Mesh 3.0

Released 2025-07-09 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Service Mesh 3.0 registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9

TI-2025-05947 CVE-2025-6547 · GHSA-v62p-rq8g-8h59

HIGH 72

Improper Input Validation vulnerability in pbkdf2 allows Signature Spoofing by Improper Validation.This issue affects pbkdf2: <=3.1.2.

CVSS 4.0CRITICAL 9.1 Network No auth No interaction EPSS 0.00463 Published 2025-06-23 Partial fix · 3.1.3 CWE-20

TI-2025-05945 CVE-2025-6545 · GHSA-h7cp-r72f-jxh6

HIGH 72

Improper Input Validation vulnerability in pbkdf2 allows Signature Spoofing by Improper Validation.

CVSS 4.0CRITICAL 9.1 Network No auth No interaction EPSS 0.00447 Published 2025-06-23 Partial fix · 3.1.3 CWE-20